Exam 312-50v11 topic 1 question 269 discussion

Actual exam question from ECCouncil's 312-50v11

Question #: 269
Topic #: 1

Firewalls are the software or hardware systems that are able to control and monitor the traffic coming in and out the target network based on pre-defined set of rules. Which of the following types of firewalls can protect against SQL injection attacks?

A. Data-driven firewall
B. Packet firewall
C. Web application firewall
D. Stateful firewall

Show Suggested Answer

Suggested Answer: C 🗳️

by ANDRESCB1988 at July 23, 2021, 6:33 a.m.

Comments

Submit Cancel

Daniel8660

8 months, 3 weeks ago

Selected Answer: C

Defend Against Injection Attacks SQL Injection Attacks - Monitor DB traffic using an IDS, WAF. (P.1983/1967)

upvoted 3 times

...

dinonino

9 months, 3 weeks ago

Active application-level firewalls: They examine all incoming requests, including the actual message that is exchanged, against known vulnerabilities, such as SQL injection, parameter and cookie tampering, and cross-site scripting. The requests that are deemed genuine are allowed to pass through them.

upvoted 1 times

dinonino

9 months, 3 weeks ago

Web application firewalls (WAFs) secure websites, web applications, and web services against known and unknown attacks. They prevent data theft and manipulation of sensitive corporate and customer information. Some of the most commonly used WAFs are as follows:  dotDefender Source: http://www.applicure.com dotDefenderTM is a software-based WAF that protects your website from malicious attacks such as SQL injection, path traversal, cross-site scripting, and others that result in website defacement. It complements the network firewall, IPS, and other network-based Internet security products. It inspects HTTP/HTTPS traffic for suspicious behavior

upvoted 1 times

...

harp0202

1 year, 4 months ago

Correct. Think of SQL injection on the web.

upvoted 2 times

...

ANDRESCB1988

1 year, 11 months ago

correct

upvoted 3 times

...